GenAgent Trust Hub
Menu

Gemini

BTier BLow risk · 49/100
  • Your data trains their AI unless you switch it off in settings.
  • The policy rules out using your data for targeted ads.
  • Data is shared only with the providers who run the service.
  • Staff may review samples of your content; you can opt out.

Chats train Google AI unless you turn Keep Activity off; humans can still read some chats for safety.

Highest riskMedium riskLow risk

Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.

Privacy policy · August 10, 2026 ↗Terms ↗36 min read · fairly hard31 lines verified word for word

Collected

What is collected

Prompts, uploads, Live audio/video, device IDs, contacts, apps, and location—not just what you type.

Read the exact line

Privacy policy

“System permissions and device data when you use Gemini mobile apps, such as call and message logs, contacts (to help you keep in touch), installed apps”

Training

How it is used

Keep Activity on means chats can train Google AI; humans review some chats even if you turn it off.

Read the exact line

Privacy policy

“Google uses your activity to provide, develop, and improve its services (including training generative AI models), as well as to protect Google, its users, and the public with the help of human reviewers.”

Sharing

Who may see it

Google says it does not sell your info; reviewers and connected apps can still see data.

Read the exact line

Privacy policy

“We take your privacy seriously, and we do not sell your personal information to anyone. Chats are disconnected from your account before being sent to service providers.”

Kept

How long it is kept

Activity auto-deletes after 18 months by default; reviewed chats can stay up to three years.

Read the exact line

Privacy policy

“Chats reviewed by human reviewers (and related data like your language, device type, location info, or feedback) are not deleted when you delete your activity. Instead, they are retained for up to three years.”

Controls

Your controls

Turn off Keep Activity, use temporary chats, delete activity, and switch Memory on or off.

Read the exact line

Privacy policy

“Visit Gemini Apps Activity to review and delete your activity (including imported chats), change your auto-delete period, and control whether your data is used to improve Google AI.”

Fine print

The fine print

Services are “as is,” is capped.

Read the exact line

Terms of service

“Google’s arising out of or relating to these terms is limited to the greater of (1) $200 or (2) the fees paid to use the relevant services in the 12 months before the dispute”

Expand “Read the exact line” to see the source alongside the explanation.

What you can turn off

The controls and opt-outs their own documents describe, and where they say to find them.

  1. Turn off Keep Activity so future chats are not used to train models

    Gemini Apps Activity

  2. Use a temporary chat for sensitive topics

    Gemini Apps (start a temporary chat)

  3. Review, auto-delete, or manually delete Gemini activity

    Gemini Apps Activity

  4. Turn Memory off or delete chats you do not want remembered

    Gemini personalization / Memory settings

If a switch is not where they say, the deletion request above still applies.

Line by line

The lines that matter most, worst first.

1 · How it is used

If Keep Activity is on, your chats and uploads can be used to train Google’s AI.

Read the exact line

Privacy policy

“Google uses your activity to provide, develop, and improve its services (including training generative AI models), as well as to protect Google, its users, and the public with the help of human reviewers.”

For example, a private draft you paste into Gemini could be used to teach future models.

2 · How it is used

Turning off training does not stop people from reading some chats for safety.

Read the exact line

Privacy policy

“Even if your Keep Activity setting is off or you use temporary chats, Google still uses your chats to respond to you and help protect Google, our users, and the public, including with help from human reviewers.”

For example, a flagged chat can still be read by a contractor even in a temporary chat.

3 · How long it is kept

Deleting a chat does not erase copies already sent to reviewers.

Read the exact line

Privacy policy

“Chats reviewed by human reviewers (and related data like your language, device type, location info, or feedback) are not deleted when you delete your activity. Instead, they are retained for up to three years.”

For example, you delete a chat today but a reviewed copy can stay for three years.

4 · What is collected

The mobile app can collect contacts, call logs, and other device data beyond the chat itself.

Read the exact line

Privacy policy

“System permissions and device data when you use Gemini mobile apps, such as call and message logs, contacts (to help you keep in touch), installed apps (like Clock), language preferences”

For example, Gemini may read your contacts to suggest who to message.

5 · What is collected

Making an avatar means Google stores recordings of your face and voice.

Read the exact line

Privacy policy

“Creating an avatar involves recording your voice and face. Google uses that data to generate AI content using your avatar across certain Google services, including Gemini Apps, and to protect Google, our users, and the public.”

For example, a selfie video for an avatar is kept in your Google Account.

6 · How it is used

You keep ownership, but Google gets a broad license to use your content to run and improve services.

Read the exact line

Terms of service

“This license allows Google to:host, reproduce, distribute, communicate, and use your content — for example, to save your content on our systems and make it accessible from anywhere you go”

For example, a story you type can be copied and processed on Google’s servers worldwide.

7 · How it is used

You can keep chats out of training with temporary chats or by turning Keep Activity off.

Read the exact line

Privacy policy

“Temporary chats are not used to train Google’s AI models. If Keep Activity is off and you don’t submit feedback, Google also does not use your future chats to improve its AI models.”

For example, start a temporary chat before pasting a work contract.

8 · How it is used

Google says it will not target ads from your Gemini conversations right now.

Read the exact line

Privacy policy

“Your Gemini Apps chats are not being used to show you ads. If this changes, we will clearly communicate it to you.”

For example, asking about a rash should not trigger related ads from that chat.

9 · How it is used

Google states it does not sell your personal information.

Read the exact line

Privacy policy

“We take your privacy seriously, and we do not sell your personal information to anyone.”

For example, it says it will not sell your chat list to a data broker.

10 · The fine print

Google does not promise the service will be accurate or fit a particular purpose.

Read the exact line

Terms of service

“TO THE EXTENT ALLOWED BY APPLICABLE LAW, WE PROVIDE OUR SERVICES “AS IS” WITHOUT ANY EXPRESS OR ”

For example, if Gemini gives bad legal advice, these terms say you cannot rely on a .

11 · Terms

You would sue in California courts.

Read the exact line

Terms of service

“These disputes will be resolved exclusively in the federal or state courts of Santa Clara County, California, USA, and you and Google consent to personal in those courts.”

For example, a U.S. user would go to Santa Clara County courts.

Words to know

Legal words from the lines above, in plain English.

human review
Company staff or contractors may read your messages or content, usually to check for rule breaking. For example, a flagged private chat with an AI can be read by a person at the company.
sell or share
Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
personal data
Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
service providers
Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
retention
How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
limitation of liability
A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
as is
You get the service in whatever state it is in, with no promise that it works or will keep working. For example, if the app deletes your photos by mistake, it is not promising to fix that or pay you back.
warranty
A promise that a product will work as described; most apps say they make no such promise at all. For example, if a paid feature never works on your phone, a no-warranty clause says that is your problem.
venue
The specific court or city where any lawsuit must be filed, which may be far from where you live. For example, a user in Florida may have to travel to a court in San Francisco to sue.
consent
Your clear agreement to something, given by an action like ticking a box or tapping Accept. For example, a pop-up asking if the app may use your location is asking for consent.
governing law
Which country's or state's laws are used to settle any dispute, no matter where you live. For example, a user in Ohio may find the terms are judged under California law.
How we got here · grade B · score 49/100 · 15 of 15 policy answers backed by a verified quote · 2 not stated
  • What does the app collect beyond what it needs to work?

    Besides chats, Gemini can collect contacts, call logs, screen content, connected-app data, device IDs, and location.

  • Does it record your voice, face or body, and what happens to that?

    Live audio/video and avatar face/voice recordings can be stored with your account. Improving models with audio is off by default.

  • Are your chats and uploads used to train AI models, and is that off by default?

    Keep Activity is on by default and uses chats to train models. You can turn it off in Gemini Apps Activity. Temporary chats are not used for training.

  • Can employees or contractors read your conversations, and when?

    Some chats are reviewed by humans to improve models. Turning Keep Activity off or using temporary chats stops improvement review, but safety review can still happen.

  • Are you profiled or tracked for advertising?

    Google says Gemini Apps chats are not used to show you ads. Shopping via Wallet may still involve ads under Wallet settings.

  • Do they sell or share your data, and can you opt out?

    Google says it does not sell personal information. Data is shared with reviewers, other Google services, and apps you connect.

  • What rights do they take over what you type and what the AI makes?

    You keep IP in your content, but you grant Google a worldwide, royalty-free, sublicensable license that lasts as long as the content is protected.

  • How long do they keep your data after you delete it, and can you delete it in the app?

    You can delete chats in Gemini Apps Activity. Default auto-delete is 18 months. Human-reviewed chats can be kept up to three years after you delete them.

  • Does it build a lasting memory or profile of you, and can you see, edit or turn it off?

    Memory can use past chats to personalize. You can turn Memory off, use temporary chats, or delete a chat so it is not used.

  • Do they commit to basic security, and have they leaked data?

    Not stated in the documents.

  • Is there a real age gate, and are teens protected?

    Google Account age rules apply; underage users need a parent’s permission. There is no extra age-assurance process described here.

  • Will they tell you when the rules change, and is the policy specific?

    The privacy notice is dated. Google says it will give reasonable advance notice of material term changes, with exceptions for new features and urgent cases.

  • Can they close your account without warning, and can you get your data out first?

    Google says it will give advance notice when reasonably possible before taking action, and you can export content with Google Takeout.

  • If something goes wrong, who pays?

    Services are provided “as is.” Google’s liability is generally capped at $200 or fees paid in the prior 12 months. Business users must indemnify Google.

  • Do subscriptions renew on their own, and can you get a refund?

    Not stated in the documents.

  • If this app can act for you, does it warn you about scams?

    May transact on unsafe websites on your behalf. Google's published scam detection covers calls and texts on Pixel, not purchases an assistant makes. This line is not from the privacy policy. We did not test the product. New AI-powered scam detection features to help protect you on Android (2025)

The privacy policy is 8,160 words at a fairly hard level (Flesch reading ease 53.1); the terms are 4,137 words at a professional or legal expert level.

Your privacy
has an agent now

Be in control of your online privacy in the AI Era with confidence.

Gen

From Gen, the Company BehindNorton